latinfo 0.20.1 → 0.20.3

package/dist/index.js

@@ -49,7 +49,7 @@ const odis_search_1 = require("./odis-search");
 const mphf_search_1 = require("./mphf-search");
 const VERSION = '0.18.1';
 const API_URL = process.env.LATINFO_API_URL || 'https://api.latinfo.dev';
-const GITHUB_CLIENT_ID = process.env.GITHUB_CLIENT_ID || 'Ov23li5fcQaiCsVtaMKK';
+const GITHUB_CLIENT_ID = process.env.GITHUB_CLIENT_ID || 'Ov23liZAqpaGnYQ6Kp5I';
 const CONFIG_DIR = path_1.default.join(os_1.default.homedir(), '.latinfo');
 const CONFIG_FILE = path_1.default.join(CONFIG_DIR, 'config.json');
 // --- JSON mode ---
@@ -157,7 +157,35 @@ async function apiRequest(config, path) {
     return res;
 }
 // --- Commands ---
-async function login(token) {
+async function login(token, username) {
+    // Zero-friction login: admin generates key for a username (no browser)
+    if (username) {
+        let adminSecret;
+        try {
+            adminSecret = requireAdmin();
+        }
+        catch {
+            console.error('Admin access required for username login. Need ADMIN_SECRET in .dev.vars or env.');
+            process.exit(1);
+        }
+        const res = await fetch(`${API_URL}/team/members`, {
+            method: 'POST',
+            headers: { Authorization: `Bearer ${adminSecret}`, 'Content-Type': 'application/json' },
+            body: JSON.stringify({ github_username: username }),
+        });
+        const data = await res.json();
+        if (!res.ok) {
+            console.error(data.message || data.error);
+            process.exit(1);
+        }
+        if (!data.api_key) {
+            console.error('Failed to generate API key');
+            process.exit(1);
+        }
+        saveConfig({ api_key: data.api_key, github_username: username, is_team: true, team_role: data.role });
+        console.log(`Logged in as ${username} (${data.role}).`);
+        return;
+    }
     // PAT login: no browser needed
     if (token) {
         const authRes = await fetch(`${API_URL}/auth/github`, {
@@ -188,21 +216,52 @@ async function login(token) {
         console.log(`Logged in as ${authData.github_username}${config.is_team ? ` (team: ${config.team_role})` : ''}`);
         return;
     }
-    // OAuth login: opens browser
-    const port = 8400;
-    const redirectUri = `http://localhost:${port}/callback`;
-    const scope = 'read:user,user:email';
-    const state = crypto.randomUUID();
-    const authUrl = `https://github.com/login/oauth/authorize?client_id=${GITHUB_CLIENT_ID}&redirect_uri=${encodeURIComponent(redirectUri)}&scope=${scope}&state=${state}`;
-    console.log('Opening GitHub...');
-    console.log('If your browser does not open, visit this URL:\n');
-    console.log(authUrl + '\n');
-    openBrowser(authUrl);
-    const code = await waitForCallback(port, state);
+    // Device Flow: no browser redirect needed, works in SSH/containers/agents
+    const deviceRes = await fetch('https://github.com/login/device/code', {
+        method: 'POST',
+        headers: { Accept: 'application/json', 'Content-Type': 'application/json' },
+        body: JSON.stringify({ client_id: GITHUB_CLIENT_ID, scope: 'read:user,user:email' }),
+    });
+    const device = await deviceRes.json();
+    console.log(`\n  Go to: ${device.verification_uri}`);
+    console.log(`  Enter code: ${device.user_code}\n`);
+    // Try to open browser automatically
+    try {
+        openBrowser(device.verification_uri);
+    }
+    catch { }
+    // Poll until authorized
+    let ghAccessToken = null;
+    const deadline = Date.now() + device.expires_in * 1000;
+    while (Date.now() < deadline) {
+        await new Promise(r => setTimeout(r, (device.interval || 5) * 1000));
+        const pollRes = await fetch('https://github.com/login/oauth/access_token', {
+            method: 'POST',
+            headers: { Accept: 'application/json', 'Content-Type': 'application/json' },
+            body: JSON.stringify({ client_id: GITHUB_CLIENT_ID, device_code: device.device_code, grant_type: 'urn:ietf:params:oauth:grant-type:device_code' }),
+        });
+        const poll = await pollRes.json();
+        if (poll.access_token) {
+            ghAccessToken = poll.access_token;
+            break;
+        }
+        if (poll.error === 'expired_token') {
+            console.error('Code expired. Run latinfo login again.');
+            process.exit(1);
+        }
+        if (poll.error && poll.error !== 'authorization_pending' && poll.error !== 'slow_down') {
+            console.error(`GitHub error: ${poll.error}`);
+            process.exit(1);
+        }
+    }
+    if (!ghAccessToken) {
+        console.error('Login timed out.');
+        process.exit(1);
+    }
     const authRes = await fetch(`${API_URL}/auth/github`, {
         method: 'POST',
         headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ code, redirect_uri: redirectUri }),
+        body: JSON.stringify({ access_token: ghAccessToken }),
     });
     if (!authRes.ok) {
         console.error('Error getting API key:', await authRes.text());
@@ -1546,6 +1605,8 @@ Free and unlimited. No credit card needed.`);
         console.log(`
 TEAM
   tasks                                        My tasks
+  tasks board                                  Bounty board (available tasks)
+  tasks claim <id>                             Claim a bounty
   tasks complete <id>                          Mark done
   tasks rank                                   Team ranking
   pipe local <source>                          Import data locally
@@ -1557,7 +1618,8 @@ ADMIN
   team add <username> [--admin]                Add team member
   team remove <username>                       Remove member
   team list                                    List all members
-  tasks assign <user> "<title>" [--points N]   Assign task
+  tasks post "<title>" [--points N]             Post bounty (anyone can claim)
+  tasks assign <user> "<title>" [--points N]   Assign task to specific member
   tasks approve <id>                           Approve + award points
   tasks reject <id> "<reason>"                 Reject back
   tasks delete <id>                            Delete task
@@ -4000,9 +4062,16 @@ async function teamCmd(args) {
             }
             console.log(`Added ${username} to team (${data.role}).`);
             if (data.api_key) {
-                console.log(`\n  API key: ${data.api_key}\n`);
-                console.log(`  Share this with the member. They set:`);
-                console.log(`    export LATINFO_API_KEY=${data.api_key}`);
+                if (args.includes('--login')) {
+                    // Save key locally — login as this user
+                    saveConfig({ api_key: data.api_key, github_username: username, is_team: true, team_role: data.role });
+                    console.log(`Logged in as ${username} (${data.role}).`);
+                }
+                else {
+                    console.log(`\n  API key: ${data.api_key}\n`);
+                    console.log(`  Share this with the member. They set:`);
+                    console.log(`    export LATINFO_API_KEY=${data.api_key}`);
+                }
             }
             try {
                 const { execSync: exec } = await Promise.resolve().then(() => __importStar(require('child_process')));
@@ -4064,9 +4133,16 @@ async function teamCmd(args) {
 async function tasksCmd(args) {
     const sub = args[0];
     // Admin commands use ADMIN_SECRET
-    if (['assign', 'approve', 'reject', 'delete'].includes(sub)) {
+    if (['assign', 'approve', 'reject', 'delete', 'post'].includes(sub)) {
         const adminSecret = requireAdmin();
-        const headers = { Authorization: `Bearer ${adminSecret}`, 'Content-Type': 'application/json' };
+        const config = loadConfig();
+        // approve/reject need API key auth + admin secret header; others use admin secret directly
+        const needsApiKey = ['approve', 'reject'].includes(sub) && config?.api_key;
+        const headers = {
+            Authorization: needsApiKey ? `Bearer ${config.api_key}` : `Bearer ${adminSecret}`,
+            'Content-Type': 'application/json',
+            ...(needsApiKey ? { 'X-Admin-Secret': adminSecret } : {}),
+        };
         switch (sub) {
             case 'assign': {
                 const username = args[1];
@@ -4089,6 +4165,26 @@ async function tasksCmd(args) {
                 console.log(`Task #${data.id} assigned to ${username}: "${title}" (${data.points} pts)`);
                 break;
             }
+            case 'post': {
+                const title = args[1];
+                const pointsIdx = args.indexOf('--points');
+                const points = pointsIdx !== -1 ? parseInt(args[pointsIdx + 1]) : 10;
+                if (!title) {
+                    console.error('Usage: latinfo tasks post "<title>" [--points N]');
+                    process.exit(1);
+                }
+                const res = await fetch(`${API_URL}/team/tasks`, {
+                    method: 'POST', headers,
+                    body: JSON.stringify({ title, points }),
+                });
+                const data = await res.json();
+                if (!res.ok) {
+                    console.error(data.message || data.error);
+                    process.exit(1);
+                }
+                console.log(`Bounty #${data.id} posted: "${title}" (${data.points} pts)`);
+                break;
+            }
             case 'approve': {
                 const taskId = args[1];
                 if (!taskId) {
@@ -4152,6 +4248,39 @@ async function tasksCmd(args) {
     }
     const headers = { Authorization: `Bearer ${config.api_key}`, 'Content-Type': 'application/json' };
     switch (sub) {
+        case 'board': {
+            const res = await fetch(`${API_URL}/team/board`, { headers });
+            const bounties = await res.json();
+            if (!res.ok) {
+                console.error('Failed to get board');
+                process.exit(1);
+            }
+            if (bounties.length === 0) {
+                console.log('No bounties available.');
+                return;
+            }
+            console.log('\n  BOUNTY BOARD\n');
+            for (const b of bounties) {
+                console.log(`  [#${b.id}]  ${String(b.points).padStart(3)} pts  ${b.title}`);
+            }
+            console.log(`\n  Claim one: latinfo tasks claim <id>\n`);
+            break;
+        }
+        case 'claim': {
+            const taskId = args[1];
+            if (!taskId) {
+                console.error('Usage: latinfo tasks claim <task-id>');
+                process.exit(1);
+            }
+            const res = await fetch(`${API_URL}/team/tasks/${taskId}/claim`, { method: 'POST', headers });
+            const data = await res.json();
+            if (!res.ok) {
+                console.error(data.message || data.error);
+                process.exit(1);
+            }
+            console.log(`Bounty #${taskId} claimed. Complete it: latinfo tasks complete ${taskId}`);
+            break;
+        }
         case 'complete': {
             const taskId = args[1];
             if (!taskId) {
@@ -4260,7 +4389,7 @@ else {
     // Admin commands (flat)
     switch (command) {
         case 'login':
-            login(tokenFlag).catch(e => { console.error(e); process.exit(1); });
+            login(tokenFlag, args[0]).catch(e => { console.error(e); process.exit(1); });
             break;
         case 'logout':
             logout();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "latinfo",
-  "version": "0.20.1",
+  "version": "0.20.3",
   "description": "Tax registry & procurement API for Latin America. Query RUC, DNI, NIT, licitaciones from Peru & Colombia. Offline MPHF search, full OCDS data, updated daily.",
   "homepage": "https://latinfo.dev",
   "repository": {